Assignment: Digital Forensic Investigation
Details:
Suspect "John Doe" has allegedly been hacking public and private websites. We believe he has an accomplice that he may be meeting soon.
After getting a search warrant, first responders collected network traffic and a RAM image of the suspect's live system. Technicians at the lab collected an offline disk image.
All collected suspect data.
There are three images:
1. Windows 10 disk image (15GB)
2. Windows 10 RAM image (4.5GB)
3. Network traffic acquisition (32MB)
The investigating member is asking the following questions:
1. Is there any evidence of website hacking?
2. Is there any evidence of a planned meeting? If so, when and where?
3. Provide any user passwords for further analysis.
Remember, proper documentation and reporting are very important! Good luck!
There are three images:
1. Windows 10 disk image (15GB)
2. Windows 10 RAM image (4.5GB)
3. Network traffic acquisition (32MB)
Format your assignment according to the give formatting requirements:
1. The answer must be double spaced, typed, using Times New Roman font (size 12), with one-inch margins on all sides.
2. The response also includes a cover page containing the title of the assignment, the course title, the student's name, and the date. The cover page is not included in the required page length.
3. Also include a reference page. The references and Citations should follow APA format. The reference page is not included in the required page length.
Attachment:- Suspect-Data.rar